VEIL TERMS OF USE (DRAFT - pending legal review) - DataSing Ltd

1. The Service. Veil helps Customer detect, review and release official information in response to requests under the Official Information Act 1982 (OIA) and the Local Government Official Information and Meetings Act 1987 (LGOIMA), using AI-assisted detection combined with a human review and approval workflow. The Service surfaces suggested redactions and statutory withholding grounds; it does not make final disclosure decisions. Customer remains solely responsible for reviewing, approving, and releasing any official information, and for compliance with the OIA, LGOIMA, the Privacy Act 2020, and any other applicable law. DataSing is not a law firm and the Service does not constitute legal advice.

2. Authorised users. Access is limited to Customer's employees and contractors authorised by Customer. Customer is responsible for its authorised users' compliance with these Terms and for maintaining the confidentiality of sign-in credentials, including through Microsoft Entra ID single sign-on.

3. Customer Data and ownership. As between the parties, Customer owns all documents, requests, redaction decisions, and other content submitted to or generated within the Service. DataSing processes Customer Data solely to provide, support, and improve the Service, and as otherwise instructed in writing by Customer. Where Azure OpenAI Service is used for AI analysis, Customer Data is not used to train, retrain, or improve any Microsoft or OpenAI model.

4. Hosting, security and sub-processors. The Service is hosted on Microsoft Azure infrastructure in Australia East, with Azure New Zealand North (Auckland) on DataSing's roadmap. Data is encrypted using AES-256 at rest and in transit. Access is controlled via Microsoft Entra ID / SSO with multi-factor authentication, SCIM-based provisioning, and role-based access control. DataSing is Wellington-based and NZ-owned; DataSing does not permit offshore contractors to access Customer Data. DataSing will notify Customer without undue delay after becoming aware of a security incident affecting Customer Data.

5. Availability. DataSing targets 99.5% monthly uptime for the Service, excluding scheduled maintenance and events outside DataSing's reasonable control.

6. Fees and term. Fees, billing frequency, and term are set out in the applicable Order Form or quote. This offer is listed as Contact Me on Microsoft Marketplace; no fees are collected through the Marketplace and Customer contracts and pays DataSing directly.

7. Confidentiality. Each party will protect the other's confidential information with reasonable care and will not disclose it except as needed to perform under these Terms or as required by law.

8. Intellectual property. DataSing and its licensors retain all right, title and interest in the Service, excluding Customer Data. Customer receives a non-exclusive, non-transferable right to use the Service during the subscription term for its internal government functions.

9. Warranties and disclaimers. DataSing will provide the Service with reasonable skill and care. The Service is provided as is beyond that; DataSing does not warrant that AI-generated suggestions are complete or error-free, and Customer must independently verify all redaction and disclosure decisions before release.

10. Limitation of liability. To be agreed with Customer and confirmed by legal counsel prior to publication.

11. Term, suspension and termination. These Terms apply for the term in the Order Form. On termination, DataSing will make Customer Data available for export for 30 days and then securely delete it except where retention is required by law.

12. Governing law. These Terms are governed by the laws of New Zealand, and the parties submit to the non-exclusive jurisdiction of the courts of New Zealand.

13. Changes. DataSing may update these Terms from time to time and will give Customer reasonable notice of material changes.

14. Contact. DataSing Ltd, Wellington, New Zealand.

NOTE: This is a working draft prepared for planning purposes and has not been reviewed by a lawyer. It must be reviewed and finalised by DataSing before this offer is published live.